Our Offensive Security professionals are on a mission to make the world a safer place, one company at a time. We believe that our work to help our clients discover and remediate their unique security risks makes every one of us safer. Our clients trust us to use cutting-edge offensive security tools, creativity, imagination, and expert knowledge to find cybersecurity risks in their networks, systems, and software.

 

We're looking to grow our team of penetration testers in Canada. We perform testing of web and smartphone applications, computer networks, cloud infrastructure, hardware devices, employees via social engineering, organizations via red team testing, and more.

 

At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk, and transparency challenges. 

 

Apply now to join One team, One Kroll.

 

Day-to-Day Responsibilities:

 

As an Offensive Security Consultant, you’ll be reporting to a Principal Consultant in our Offensive Security team and deliver projects for our clients, large and small, across North America and Europe. You will perform various web application, API, mobile, and infrastructure penetration tests. You will also draft reports based on the assessment results and gathered evidence and help address client inquiries regarding these results. In addition to the execution of traditional security assessments, you will participate in their refinement and improvement.

 

In summary, you will 

Execute offensive security and consultative engagements for our clients’ applications and infrastructure Author deliverables such as vulnerability reports and executive reports Engage with our clients to understand their requirements, update them on project status, answer their queries, and present your findings and recommendations Update your skills and knowledge with the latest trends in cybersecurity and emerging technology

 

Essential Traits: 

Bachelor’s degree or college diploma in information security, computer science or engineering, software engineering, or IT/System/Network administration 2+ years in cybersecurity, with at least 1 year in network or application penetration testing A strong understanding of offensive security methodology and vulnerability frameworks such as the OWASP Testing Guide, MITRE ATT&CK, PTES, or others An ability to analyze root causes and deliver technological recommendations to our clients Excellent oral and written communication skills Experience working both as part of a team and independently Certifications such as OSCP, OSWE, SANS GWAPT, SANS GPEN, CREST CPSA, or CREST CRT, are an asset

 

About Kroll 

 

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.

 

In order to be considered for a position, you must formally apply via careers.kroll.com.

 

Kroll is committed to equal opportunity and diversity, and recruits people based on merit. 

 

The current salary range for this position is $95,000 to $110,000

 

 

#LI-CN1

#LI-Remote